c763e1bd83332b5d65e76125b24d8d2bb3dcba98d2473fdaa8cfe758453ca58d | Triage

Sharing

General

Target

c763e1bd83332b5d65e76125b24d8d2bb3dcba98d2473fdaa8cfe758453ca58d
Size

3.9MB
MD5

284e07493c24929b0743d253f66150f1
SHA1

022be5b14ec46a6108b248e794a4b38675dd0b6e
SHA256

c763e1bd83332b5d65e76125b24d8d2bb3dcba98d2473fdaa8cfe758453ca58d
SHA512

3e27cf593f468ada3d1dee96be4aa9512b00b1694d3913a757f83aa7c428b32e479950f004d7bca84ec21a280157f69cda59510c6cdfc34c6422ab550377030a
SSDEEP

98304:rmR5ZEbGre5YeV960tVAvAk532YaX4cUePGb3k/Dnu0HVQ60YDgs8VC/YMw:rmOG92k0Wj32Ya3Gbul1dxDGVC4

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

c763e1bd83332b5d65e76125b24d8d2bb3dcba98d2473fdaa8cfe758453ca58d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 508KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE